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FAX 


PAGE 


http://www.w3.OTg/TR/S0AP-dsig/, for more information about using SOAP messages in this 
manner.) - 


- The "InUpdateUserProfileRequest" message 5 1 8 is analogous to the 
^nCreateUserProfileRequesT message 510, and uses the same parameters in this example. The 
"UpdateUserProfile" operation 560 receives the "InUpdateUserProfileRequesf message 518, 
and responds with an "OutUpdateUserProeieResponsc" message 520 that is analogous to the 
"OutCreateUserProfileResponse" message 5 12. fa the example, this output message 5 12 returns 
a Boolean value indicating whether the profile cr eati o n update was successful or not - 

Please replace the paragraph that begins on Page 29, line 15 and carries over to Page 30, line 13 
with the following marked-up replacement paragraph: 

- Preferably, the authentication token generated in Block 610 is generated as an XML 
fragment, which can then be included in a SOAP message header. In mis manner, user identities 
may be relayed when accessing web services. Refer to the discussion of the sample SOAP 
message 700 in Figs. 7 A and 7B, which shows how a digital signature is included m a SOAP 
header using XML syntax. (As shown therein, the digital signature tokens use a qualified 
namespace, and are therefore preceded by the letters "ds") Authentication systems and policy 
systems may be bound to service operations using the SOAP header as well. WSDL descriptions 
preferably model operations as a combination of a SOAP header and body. That is, all 
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with the following marked-up replacement 


